CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm).
The io.github.attestd-io/attestd-mcp server is an official Model Context Protocol (MCP) server for Attestd. It provides CVE and supply-chain checks for MCP clients, covering infrastructure, PyPI, and npm packages, and returns a structured risk response.
🛠️ Key Features
Checks dependency versions for exploitable CVEs
Detects confirmed supply-chain compromise
Supports infrastructure, PyPI, and npm package inputs
Provides CVE risk and supply-chain checks via MCP tools
🚀 Use Cases
Performing automated CVE risk checks for dependencies
Verifying whether dependency versions are affected by confirmed supply-chain compromises
Running these checks from MCP-compatible clients
⚡ Developer Benefits
One API call returns a structured risk response
Integrates with Claude Code, Claude Desktop, and other MCP-compatible clients
⚠️ Limitations
Tool coverage is limited to the areas described: infrastructure, PyPI, and npm packages
Attestd checks whether a dependency version has exploitable CVEs or a confirmed supply-chain compromise. One API call returns a structured risk response.
Official Model Context Protocol (MCP) server for Attestd. Exposes CVE risk and supply-chain checks as tools for Claude Code, Claude Desktop, and any MCP-compatible client.
check_batch_vulnerabilities: checks up to 100 packages in one call. Use for lockfile and manifest audits.
list_covered_products: returns Attestd-covered products. With an API key, returns live data from GET /v1/products. Without a key, returns the static bundled infrastructure list.
get_cve_details: returns CVSS, EPSS, KEV status, and affected products for a single CVE id.
get_usage: returns remaining quota for the authenticated key (GET /v1/usage).
Prerequisites
Node.js 18+
An Attestd API key from the portal. Required for check_package_vulnerability, check_batch_vulnerabilities, get_cve_details, get_usage, and live list_covered_products.
true if the product is not covered. Unknown risk, not safe.
riskState
critical | high | elevated | low | none | null when outside coverage
riskFactors
Risk factor vocabulary driving riskState
maxEpss
Highest EPSS probability across matching CVEs
activelyExploited
CISA KEV signal
remoteExploitable
true if any matching CVE is remotely exploitable
authenticationRequired
true only when all matching CVEs require authentication
patchAvailable / fixedVersion
Patch guidance
confidence
Synthesis confidence 0.0–1.0
cveIds
CVE IDs contributing to the risk assessment
typosquat
Package name integrity: detected, resembles, confidence, ecosystem (SDK 0.5 runtime; extra fields are omitted)
message
Explanation when outsideCoverage is true
supplyChainCompromised / supplyChainDescription
PyPI/npm supply-chain signal
On invalid/missing API key or rate limit, returns isError: true with a JSON error string.
check_batch_vulnerabilities
Argument
Type
Description
items
array
Array of { product, version } objects. Maximum 100 per call. Each item costs one API call.
Quota is checked upfront. If the batch would exceed your monthly quota, a 429 is returned before any calls are billed.
Returns JSON with count and results. Supported items include the same fields as check_package_vulnerability minus typosquat. Outside-coverage items return only product, version, outsideCoverage: true, and riskState: null.
list_covered_products
No arguments. With an API key, returns live JSON from GET /v1/products:
Field
Meaning
source
"live" when fetched from the API
total
Combined count of CVE products and supply chain packages
cveProducts
CVE infrastructure slugs with display names
supplyChainPackages
Monitored PyPI/npm packages
Without an API key, returns the static bundled list:
Field
Meaning
source
"static"
count
Number of bundled infrastructure products
products
Array of { slug, display } entries
get_cve_details
Argument
Type
Description
cve_id
string
CVE identifier, e.g. CVE-2021-44228
Returns JSON with:
Field
Meaning
found
true when the CVE is in Attestd's database; false on 404 (not an error)
cveId
CVE identifier
description
NVD description text
cvssScore / cvssVector
CVSS base score and vector
activelyExploited
CISA KEV signal
remoteExploitable
Remotely exploitable
authenticationRequired
Authentication required for exploitation
affectedProducts
Attestd product slugs affected by this CVE
epssScore / epssPercentile
EPSS probability and percentile
sourcePublishedAt / lastCheckedAt
ISO timestamps
When the CVE is not found, returns { "found": false, "cveId": "..." } without isError. On invalid/missing API key or rate limit, returns isError: true with a JSON error string.
get_usage
No arguments. Requires an API key. Returns JSON from GET /v1/usage:
Field
Meaning
tier
Account plan tier
keyCallsThisMonth
Calls billed to this key in the current period
accountCallsThisMonth
Calls billed across all keys on the account
includedCalls
Monthly included call cap
billingPeriodStart / billingPeriodEnd
ISO timestamps
overageCalls / estimatedOverageUsd
Overage vs the included cap
On invalid/missing API key or rate limit, returns isError: true with a JSON error string.
Verify locally
bash
npm run build
echo'{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' | node dist/index.js
Attestd API key (atst_...). Required for check_package_vulnerability, check_batch_vulnerabilities, get_cve_details, and live list_covered_products. Get one at https://api.attestd.io/portal
ATTESTD_BASE_URL
Optional API base URL override. Defaults to https://api.attestd.io
